Description
Chaterm before 0.12.1 contains a login cross-site request forgery vulnerability that allows remote attackers to inject login state by sending chaterm:// callbacks without OAuth state validation. Attackers can trigger a crafted callback with attacker-controlled userInfo from a web page, signing the victim into the attacker's account so default data sync uploads saved hosts, passwords, and private keys.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
chaterm Chaterm
Default version status: unaffected
0.2.0 to < 0.12.1affected
References
- https://github.com/Chaterm/Chaterm/pull/2326 ↗
- https://github.com/Chaterm/Chaterm/commit/41f747f17845cd980f289cc9ea8ff9978b6f7ad6 ↗
- https://github.com/Chaterm/Chaterm ↗
- https://github.com/Chaterm/Chaterm/releases/tag/v0.12.1 ↗
- https://github.com/Chaterm/Chaterm/blob/v0.12.0/src/main/index.ts#L3442-L3455 ↗
- https://www.vulncheck.com/advisories/chaterm-before-0.12.1-login-csrf-via-chaterm-oauth-callback ↗